Vulnerabilities > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 1999-09-21 | CVE-1999-0708 | Unspecified vulnerability in Infodrom Cfingerd 1.4.2 Buffer overflow in cfingerd allows local users to gain root privileges via a long GECOS field. | 7.2 |
| 1999-09-16 | CVE-1999-0954 | Unspecified vulnerability in Matt Wright Wwwboard 2.0Alpha2 WWWBoard has a default username and default password. | 7.5 |
| 1999-09-16 | CVE-1999-0890 | Unspecified vulnerability in Ihtml Merchant Ihtml Merchant iHTML Merchant allows remote attackers to obtain sensitive information or execute commands via a code parsing error. | 7.5 |
| 1999-09-13 | CVE-1999-1053 | Remote Command Execution vulnerability in Guestbook CGI guestbook.pl cleanses user-inserted SSI commands by removing text between "<!--" and "-->" separators, which allows remote attackers to execute arbitrary commands when guestbook.pl is run on Apache 1.3.9 and possibly other versions, since Apache allows other closing sequences besides "-->". | 7.5 |
| 1999-09-13 | CVE-1999-0691 | Buffer overflow in the AddSuLog function of the CDE dtaction utility allows local users to gain root privileges via a long user name. | 7.2 |
| 1999-09-13 | CVE-1999-0689 | The CDE dtspcd daemon allows local users to execute arbitrary commands via a symlink attack. | 7.2 |
| 1999-09-13 | CVE-1999-0687 | The ToolTalk ttsession daemon uses weak RPC authentication, which allows a remote attacker to execute commands. | 7.5 |
| 1999-09-09 | CVE-1999-0697 | Unspecified vulnerability in SCO Openserver 5.0.4/5.0.5 SCO Doctor allows local users to gain root privileges through a Tools option. | 7.2 |
| 1999-09-08 | CVE-1999-0767 | Unspecified vulnerability in SUN Solaris and Sunos Buffer overflow in Solaris libc, ufsrestore, and rcp via LC_MESSAGES environmental variable. | 7.2 |
| 1999-09-02 | CVE-1999-1516 | Unspecified vulnerability in Tenfour TFS Gateway Smtp 3.2 A buffer overflow in TenFour TFS Gateway SMTP mail server 3.2 allows an attacker to crash the mail server and possibly execute arbitrary code by offering more than 128 bytes in a MAIL FROM string. | 7.5 |